Org.apache.tomcat.embed:tomcat-embed-core
This hub aggregates every CVE we track for Org.apache.tomcat.embed:tomcat-embed-core, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
58
CVEs tracked
9
Critical
32
High
5
In CISA KEV
Severity distribution
HIGH32MEDIUM17CRITICAL9
Monthly trend
1
0
0
0
1
2
0
0
1
2
1
3
2
1
0
3
0
0
0
2
0
0
0
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Org.apache.tomcat.embed:tomcat-embed-core.
- CVE-2026-24733Apache Tomcat: Security constraint bypass with HTTP/0.96.5
- CVE-2025-66614Apache Tomcat: Client certificate verification bypass due to virtual host mapping7.6
- CVE-2025-61795Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3
- CVE-2025-55752Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5
- CVE-2025-55754Apache Tomcat: console manipulation via escape sequences in log messages9.6
- CVE-2025-48989Apache Tomcat: h2 DoS - Made You Reset7.5
- CVE-2025-53506Apache Tomcat: DoS via excessive h2 streams at connection start7.5
- CVE-2025-52520Apache Tomcat: DoS via integer overflow in multipart file upload7.5
- CVE-2025-49124Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows8.4
- CVE-2025-49125Apache Tomcat: Security constraint bypass for pre/post-resources7.5
- CVE-2025-48988Apache Tomcat: FileUpload large number of parts with headers DoS7.5
- CVE-2025-46701Apache Tomcat: Security constraint bypass for CGI scripts7.3
- CVE-2025-31651Apache Tomcat: Bypass of rules in Rewrite Valve9.8
- CVE-2025-31650Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5
- CVE-2025-24813Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUTKEV9.8
Product normalization is registry-driven with AI assist and human review. How it works